f4bfdd79f60a556c25baf3aff3c09ed9ce5dc17e37c184a7ad64222b9ad0ef70

Sharing

Copy URL Twitter E-mail

General

Target
Blitz-2.1.602.exe
Size 128.3MB
Sample260722-3147kabj6t
SHA256 f4bfdd79f60a556c25baf3aff3c09ed9ce5dc17e37c184a7ad64222b9ad0ef70
MD5 fd183a3aff9434414053aa6dba3c647a
SHA1 cf3adcb2ae4933a6313f4d83e6859ee7df142e2b
SHA512 e331db4433d56acb1824d411387b5e82c4a5f3386173d4f46c1e6974e6795b630a8af76fe860ccb6f8becc3d0ef228f34a156493db28967cc6e6210df562491c
SSDEEP 3145728:pFzeoWYVT42XC2c3y665qKcCjaliCl8mO:nd42y2cXINioCla
TLSH
T1415833780BFF531DC11EA9768F95A8525FFE1F73CA94A10D369A7471A23B3AC0B11209
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Blitz-2.1.602.exe
- Size 128.3MB
- SHA256 f4bfdd79f60a556c25baf3aff3c09ed9ce5dc17e37c184a7ad64222b9ad0ef70
- MD5 fd183a3aff9434414053aa6dba3c647a
- SHA1 cf3adcb2ae4933a6313f4d83e6859ee7df142e2b
- SHA512 e331db4433d56acb1824d411387b5e82c4a5f3386173d4f46c1e6974e6795b630a8af76fe860ccb6f8becc3d0ef228f34a156493db28967cc6e6210df562491c
- SSDEEP 3145728:pFzeoWYVT42XC2c3y665qKcCjaliCl8mO:nd42y2cXINioCla
- TLSH
  T1415833780BFF531DC11EA9768F95A8525FFE1F73CA94A10D369A7471A23B3AC0B11209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution spyware stealer
- Enumerates processes with tasklist
  discovery
behavioral1
- Target
  $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH
  T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/android-arm/node.napi.armv7.node
- Size 317KB
- SHA256 8a6f1f4ede9c14b7459214429dffbbd0962ab18a63573d5e3db4a071b4425e53
- MD5 b4198ee8d0847182e046491cdb994a37
- SHA1 0ca1e4ad8d5e3247f61f2eba3698df2914fa7db8
- SHA512 595dcc842d5e27b2ae2b2b5ed071184be1d2b6f151220e8bac059cc25667ca13fee61d3785a24e9a6404c235d56d5915669e1b6d849f99f0be03d933e7d356c7
- SSDEEP 6144:RwLlpgWIlsXhsW3veSeChInVX+0QeT9qA4lVjgGyFdmc0LAnoX3E8:qLfgWIlwR3v/hInVX5NREZEFgceAnoX
- TLSH
  T16F641767F505C902C8E82572B15EC1A8736B62B9D3D83162CD8A9B347ECF5CE0D3A395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/android-arm64/node.napi.armv8.node
- Size 352KB
- SHA256 5a48730eb00ed420052488e4140418d87d7e4fadc4c975821cb75e80a640e67b
- MD5 0d54b11f81b5e7a8456af7a8840514ff
- SHA1 5c4afe095a14f20fd9e09ab01f084c61be381f70
- SHA512 ee46bec1f1465e64d8bd97d84098fc610724ca35e336e31bb6e9a9f01ff5801f0b48eef05fa2772dd4373220b6d0136b41600ebbf6c3873cfa29bca176508662
- SSDEEP 6144:UDoisg9yl2XiEAk7F61xnGZNOcAtInvrDTrI0:covg9ylT887GZtGI33I
- TLSH
  T146745B22FD0C692BECC6B17C49670395F232B4ED5B0081DA6E6E9329FEC53D59E147A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-arm/node.napi.armv6.node
- Size 383KB
- SHA256 7bbecbc527d97794ac439173572b324c036d61a53fca92e7f6136615c2634247
- MD5 ffaed8b8a788c8341fea99941d6c6af8
- SHA1 540d9be2e8e22c3afe78800bb8a4a4fe1a2dd362
- SHA512 ebfff5aa4acd57a3e2e535b637e595c25deb8f049863840a90d8e2d898e7b2e5d5fd3e3aa9e49f4a17899ee31882eb04d625ee125b5f589bbaffff732e942557
- SSDEEP 6144:EQmnujKhsgPM9VZjt89R1ySFEmG6D1a71jgIa63xxx8/Xrs:FcuWhRUb7899um/DghjgIpxxx8
- TLSH
  T1DF841967F8419B09C4852A76F31F9348B377AB2AC3DA3159DD2857387BCB48A0D392C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-arm/node.napi.armv7.node
- Size 383KB
- SHA256 3e1893440bbef942c70830d325f28e18b8f424e4a2d0530bcb04854707faae84
- MD5 2bce30f73cd872c45a11c49241c0dab3
- SHA1 6107892bd710fb513c2779d5f6b76ac7afeaf96b
- SHA512 a4fc370af020da6a53ffc07ec049944fad86e6f6cd9ad5400315d9da40239c952f804684f7f7f0a55ccbddc1406863e301be7d265fc71bacff8265434a038bd8
- SSDEEP 6144:U1cIYxV8kqvGStzi/SmN2/sbamLo3njAXEhDVyN2Kxxx8/Xrb:CcIYxszi/SW2camIsXEhxyNvxxx8P
- TLSH
  T154841763F445AF46C9C92631F25F9354B3776EBAC2DA2159CD2887387BCB08A0D392C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-arm64/node.napi.armv8.node
- Size 413KB
- SHA256 8a33b138161ee5c9abdd58acca3ad0e46141dae475ede3daacc7a748641c19e7
- MD5 74dd34d7cef74c1edb52edc0d5ec18b8
- SHA1 f7a4b6f2ced297940d8eb905dc152769174c9794
- SHA512 d7c9c85c2f08b5cca981e97f99c2c5953f757b944be274db332f4e018ad0c01630a27487974d06bcbed1e7ecd8c01bd87656340088ae21e490322033f4b42916
- SSDEEP 12288:U2jr+RtKHmTOTRoCnvUKmSACX458OrPN/AViy:Uu9RUkiy
- TLSH
  T127946E36F90D3C02D98BF63CAF8D6312B3276491D37582E6B9491309BB862DCDD7A950
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-x64/node.napi.glibc.node
- Size 485KB
- SHA256 a4b2e54a3b557a027356ae0f5d11645393f5fa1248ff773e2f826588a46e17ff
- MD5 5475ab592396587c524cf06cbea197f9
- SHA1 2cd3e30c8469f624b368bd31d7fdf8f602dcd1bb
- SHA512 b55a3c961bee0e6331d3b5a584dd001d64499ba3ae77248c7d5ed02abba5ccb6db09db1bfe53bf56f3e16ce9ddc2390166c19b663d4d5f52730c3685a871d9aa
- SSDEEP 6144:3DnU7DuZO1aJSmUHM/weG6JAw8OlRtUUUQkhuG4FEuiW3bobiaqa:3DnNZ9cnaJAloIUJLFEuiEobJp
- TLSH
  T180B45C37E254945CD08780710BCF8FF1A771B4B2033629AF26CAE7752E66E411F1A76A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-x64/node.napi.musl.node
- Size 449KB
- SHA256 7e47d25bbbde4268ebadef394c651f3851179a6937bdb7acea6f507a74ed5081
- MD5 e61864dff370fa147c7eff58b86cefb7
- SHA1 91618e40257a3030b53d59f165d5e0d990ea5a22
- SHA512 9938cf613aac452bb86a3a4cd55f7c2270749b715620c9cc9b3270ea83fb97ed8fbf1b726d2617dd7c6b3c1193afa112e6d38d186acd8fb351d9e70e649714f7
- SSDEEP 6144:V57WEWDDDYYYYVVVViiiisoQ6QDt1u5ezC8rv4gIeQc/DZVPdaS3etoS:3WaV6QDS5kjbIAVPdaX
- TLSH
  T161A46C2BE2A59828D087843107DBC3B19271F8F0573939BF36CDEB761E92D90591E762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/win32-ia32/node.napi.node
- Size 434KB
- SHA256 a4f03881ba542dff477f08028c9ea3385662f6e540f3f46b3118a60ec34cf692
- MD5 586005fbe56e589599d7f025fdd780b9
- SHA1 76f19ae1912e31d7527520db0ed17966a4ceae3b
- SHA512 6b426f7904ad1e083e907f1d1a8c33650d3cee32aeee2835ee6a99dd00116b304413d4c7ff3f6230ff838059d6296ed3222f2254154259c6edf14ad30f9c1983
- SSDEEP 12288:JL2it6MWMuXkv7oUdKLp680A0WQqKQbzHEzcV54Lck8RMom:TKf0WQXQbzHKcu4h
- TLSH
  T1B1948D306546C13ADABE1470787E9AAF697C29A00B3954CFD3C82D7B6D345C25B32E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  resources/app.asar.unpacked/node_modules/classic-level/prebuilds/win32-x64/node.napi.node
- Size 502KB
- SHA256 2e46125d679a7e1051fef7b862008ff520e06b49130c70378ee817ca7c63cafc
- MD5 634880d110281abbdb792740b736716c
- SHA1 d7744ef00679b1b75a2277ed02110a3606c838c4
- SHA512 7edd950f5a779723e85780c61d3e2fdbe0a24883790172035c6fd452724f73240f932d6d94791cc468d05825ea606cf1d1bf8cc5d8279bff0dc3f7e508edf0b9
- SSDEEP 12288:OIX678cczpdlTvplMMjKOElQjsOyv9CpZZB:OIX678cYpdlLpWMmOE+wO2M7
- TLSH
  T179B46C2AA6A802B9F0A7D17CC9A34D07FA7638470365DADF07E086765F177E05A3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/bin/lzmajs
- Size 1KB
- SHA256 f29aae866c7bb66e5424a730c473231c1329f6bb0636ad33945299a4c4957a50
- MD5 cdea38e7d795ce6e8274bef89c773780
- SHA1 7bf89bfcaac6964e4f551233f0daea7dc2f58930
- SHA512 401068503e0cefa4bae0c524bafd903f83ce945170a5a28fa5b8f3004c9b1afd09db188e416a071011276c836a6a2dd75ca5d9397e7d24cd1715b6c46e1b71e9
- TLSH
  T1F941873006FEA06E422340B73BFFD45B59B5983B1145DE69F99CC5C24FC0191199AEFA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/index.js
- Size 13KB
- SHA256 77d9568c9c5479953a4588875b9d5c4a06ce9f926f9fab96d7678e68a74e6985
- MD5 ff2e30ea41c50e397cc5fb516d633d2b
- SHA1 bfa32375a230e4c6b37d9dee9a94bd106af80bdf
- SHA512 bbaa0d96fa3b546fe913d0988dbac54c8d963b4a79f8459c22cf27920e754977f471ccecc07bf9936bd34a3b65dfc6517ae5e126dc260d68347f71f3106bb51f
- SSDEEP 192:4aBgo4Ls4gCGlqmPk4TPGwsVh6rLSvR50qjXryXN6gLo0OuLoC6lVlfuswTDo+Wo:eokBL4LSA6e6z9qrotsRdn
- TLSH
  T14652FF496DFB31624673B1754F9F9A0DB23DD017142CCE94B98C83E0AF905389AA6F64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/liblzma-build.sh
- Size 138B
- SHA256 ae56a4c3e521e37c5677e4d867e79ab46ac23b3f5682a7e2893497232a0326ce
- MD5 cd2e20d9a8384d3090058e3428d6b327
- SHA1 b3f90405a89eeb07ff6fc4243be8016ce2d6e1c3
- SHA512 d39514e34aea97b3b03b966b76affc5fbb740799bf15219935d8995029a1fbeefb59d3a2a356ede3cbfce69ed0d775680dbff33493d2585a7ab29b84cbb70527
- TLSH
  T143C02BC1C07B00225B47021911463000CB148AE51A178A56C0C4C2E8C7251D9A61790D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh
- Size 733B
- SHA256 100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116
- MD5 e886188759f08df991ad8af4bbc333c1
- SHA1 b9644330527cb91fc20e2d66a93c8380f71932ff
- SHA512 b4b30187505941eb75d44bdb51d4bc9ee778034d0850c7253a38ca636a620c9c6ae8954e43515b57ef409adcb6a91976e4e92f49b466c6c38e7bd33a79340ce8
- TLSH
  T1CD019C17E456365B2E2CC6A273EE6893EA05AEC26F2C551FA0803A7873BF5075610C86
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/electron.napi.node
- Size 421KB
- SHA256 99006146d3f02a3701a254dbf57d10175a2950fa7d85b4dee90b99c997d882da
- MD5 5a8ff3c35b7d2d367d4b56f016650860
- SHA1 43f00704db624630f2164d52e47e93d4430b764a
- SHA512 753b32f63a2638b49123b49876c8f0e336aebcaed128b181b7555de4646a9f3e1e2419b7489de61888a5b18f40790507367206507ee52afe92d19abc78129721
- SSDEEP 6144:MZMB4WEWGxBL/aJrxffqWCMFe4FQvYOBoSj9uf1iEENkC:MZeE9BMV3e4EtiG9uf1ik
- TLSH
  T1DD94F839E261D17DD04B947099DB4A0310B4B5F85A35200E3BCC9F6F2A77BA68B6D393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/node.napi.node
- Size 421KB
- SHA256 9a03f9e38254ac721d042561b23842c944db243c3c30fb21f240a577a34c8cb8
- MD5 c5ac962f6ef85085075bf5e761696f56
- SHA1 0574d6d3914d86027d35c5a4bcd36c9f23f426fb
- SHA512 64323a70a99aa2a018e5c4e43768a3c4b9897e8da4cd34a580cdb50d7657a54a3bf36ba4ddfa21f70a84b4800e788091a7c65ccce6ae58e18528c0b5118a1072
- SSDEEP 6144:oB4oEWvydo2tHAufixrHJMv3XlhYOkoNr1iEEN56:cEKydog3TtD91i5
- TLSH
  T11B94F839E261D17DD04B947099DB4A4310B4B1F85A35200E3BCC9F6F2A77BA68B6D393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/electron.napi.node
- Size 421KB
- SHA256 99006146d3f02a3701a254dbf57d10175a2950fa7d85b4dee90b99c997d882da
- MD5 5a8ff3c35b7d2d367d4b56f016650860
- SHA1 43f00704db624630f2164d52e47e93d4430b764a
- SHA512 753b32f63a2638b49123b49876c8f0e336aebcaed128b181b7555de4646a9f3e1e2419b7489de61888a5b18f40790507367206507ee52afe92d19abc78129721
- SSDEEP 6144:MZMB4WEWGxBL/aJrxffqWCMFe4FQvYOBoSj9uf1iEENkC:MZeE9BMV3e4EtiG9uf1ik
- TLSH
  T1DD94F839E261D17DD04B947099DB4A0310B4B5F85A35200E3BCC9F6F2A77BA68B6D393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/node.napi.node
- Size 421KB
- SHA256 9a03f9e38254ac721d042561b23842c944db243c3c30fb21f240a577a34c8cb8
- MD5 c5ac962f6ef85085075bf5e761696f56
- SHA1 0574d6d3914d86027d35c5a4bcd36c9f23f426fb
- SHA512 64323a70a99aa2a018e5c4e43768a3c4b9897e8da4cd34a580cdb50d7657a54a3bf36ba4ddfa21f70a84b4800e788091a7c65ccce6ae58e18528c0b5118a1072
- SSDEEP 6144:oB4oEWvydo2tHAufixrHJMv3XlhYOkoNr1iEEN56:cEKydog3TtD91i5
- TLSH
  T11B94F839E261D17DD04B947099DB4A4310B4B1F85A35200E3BCC9F6F2A77BA68B6D393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/electron.napi.node
- Size 619KB
- SHA256 e73951d1d9f4155cadbeb530be14dd32e1abc4ad9332527507ede586ce41e095
- MD5 8e7adb376ff87a10990f783562b06a4b
- SHA1 924bcdf667dcb58767efc662068ffaea2f40e7f3
- SHA512 6a18f6f71a55eacdd4dd415e3a39ff2fd551594d332921e5e68d717142ec75595a32dab7d40aa82b33dc33c27661e7382d622dea4173a1deb88fcfc976621e23
- SSDEEP 6144:GaiFHaev+gFh4N7UUBSgaAng6PM+FMi83y9OMZMduqpLLDg3KF8:riF6xgAN4Fgbg6PMWM9uqp1F8
- TLSH
  T1F8D48E207894C2B2FDEA20FA01ECB637029DD4B0075496C756E81BFED6606C2BB37657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/liblzma.dll
- Size 148KB
- SHA256 37c4a4277ac066522402c71fd03bea5e8900fefd505ccf9b6399128c92182780
- MD5 29e433f0ecf0cc28fad655baeff3d006
- SHA1 9948f1638d3afddf346d901a04a9e5a83df5b9b4
- SHA512 98bf4ceb9a04d50cdf64dad0fdd40e5fc61a2ffd7032aa4cefbcda0fa8dc33988902b5ecedf7f7ff5e32fde729dd8948f6561f38626d2140fa1f36ce7fae4e3c
- SSDEEP 1536:pw/AmC0uspt8PwqmZMnDBQQP7J0MG5diyJg5401Tlqb97MruNGn9mNonE2w62:pIAG8wqxDt7J4PK5/Q1MH9mNojw62
- TLSH
  T11AE30884E9D7FAF1F6579D70D852BF3B85F05B028110C978D68C9BADE82B762241930B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/node.napi.node
- Size 619KB
- SHA256 ab5e095b49f13ef86a3dc83f0c11b9bee1fef24a4cf0616b0015d0ebabd443e5
- MD5 3a706e64b17cc01d142794436c95805a
- SHA1 f1bb6751517c517681bab11e5c47a9a141e659c7
- SHA512 f839493cf238c735b7937d361bf08cdc2ef3381ac88accc759096baf0c6063660ac9771d18de8c3af94b5b8abbb1fa079bd60824ec48996946fdbac6f5f92ac3
- SSDEEP 6144:ZFjUvSYDEMcss+lN7UUa65u/XW4QxAiBbsp6qE+pKHVQiWuqpvKg3Kg:ZpUvfEMfN485eW445bsp6qhuqpmg
- TLSH
  T1D7D47D207884C2B2FDEA20FA16ACB677029DD4B0075496C756E80BFED6606C27B37757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/electron.napi.node
- Size 797KB
- SHA256 5c7dd24a625d806e37cca949e52ec348ef0054a902e8700f9fdb61cac44e4c9e
- MD5 b872a2c94ff78af34eb7c14c71f7a784
- SHA1 e8016fafa0a91176d56664d9218abbc286707411
- SHA512 df93b9c2e8b118d3e01da7dd63af83e4bf0c36d835ee49167aa49b3a9459b6f21b0802feeb6ed52d7eefc0c1270128a7748487ead1bee82f2039745599a80262
- SSDEEP 12288:BiHbpT41iFWTMg60IHCEqooN/vnbCzkEHN3YbmMxBIfOPB1zjetJR:Mu1i+MgPlrfetJ
- TLSH
  T1CE057D666BA816A1D0B7D13E89D78F56EAB1F804433467CB01D0459D2F13BF89A3F722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/liblzma.dll
- Size 147KB
- SHA256 fc7348418be392d5ecebd7b9f07c1ae5bc530260fef923801b140088eddce96e
- MD5 2e91129e126d90edccef94ebf7abd6e1
- SHA1 a8d221d3475216c11f4beaed8c9b9f33ccee32fc
- SHA512 dbae0120c0b3709811fe9a738a4d66da4b47a1d09f0e5be373a77330d57fd87068963c76f294eac81723856dac500e3b824e7def828a1646fef611230d42898d
- SSDEEP 3072:SLkFJu59WjUfFwgJEvCSYuw1flpY9mNoWPwx:fFJu5EjUfFxqvCj76YOWPw
- TLSH
  T101E3F756A292F4D9E767CC34CAA26F33E4F0781642206E29539CD73C2A6FFA1161D713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/node.napi.node
- Size 796KB
- SHA256 c738ba03c84330556184b07d4f9a94bb875807834f46c0b49ea42c8e45df714f
- MD5 218fc90e5725a6a7ddfdd1edb760c12a
- SHA1 2fd9c618e6105a81c1f812d55f405a947b61fe3b
- SHA512 7d6d0cef3b33a092d9a8f37e2fa2f3ec44b843f4bc0d3415d832f3c183318cdfa3d05590d94c552a1ef322de2d67bcb24864c65f4fe43293891755b94bd8062a
- SSDEEP 12288:7vWhpNRexpxqf8qFl9CfrumyKlAsppNDInGPpbn+JY2ef5HDek7hEDi:LKRexefIek7hE
- TLSH
  T16F057D662BA812A1D4B7D13DC9978F56EAB1F8144730A7CB01D0459D2F13BF89A3F722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH
  T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  $R0/Uninstall Blitz.exe
- Size 534KB
- SHA256 c693514a69d250170606826164da5a97a931faba72f83dbad4d984cb49b7d65a
- MD5 08479de63474c4aa8e1ddfb83f020b89
- SHA1 cdf25f09e75cc3ef151d4a1d9175ce9aa6db5dd7
- SHA512 b10333a1a03670d8e9c414d631fba108c40872ceeca43f249b442881e9ada3a0e55c07f220b60b08aecad118772dcb3090342af223b22ebbd497270e6969eb2e
- SSDEEP 6144:eS740Izmb2FQ1jRLMg+naRs2t0EyL+yaCDPFH6XdR+EkiH3yt:fCmb2FQ1FLSaCRKJCDPNKT1zH3E
- TLSH
  T19AC49D5D937D411AC2CF6FB80B908CA46FB25E71CEA5B60B37A133B58A363C525942F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Enumerates processes with tasklist
  discovery
behavioral32